Re: [PATCH net] vhost-vsock: fix use after free

From: Jason Wang
Date: Thu Sep 27 2018 - 08:21:50 EST




On 2018å09æ27æ 17:52, Sergei Shtylyov wrote:
Hello!

On 9/27/2018 11:43 AM, Jason Wang wrote:

ÂÂ Just a couple of typos...

The access of vsock is not protected by vhost_vsock_lock. This may
lead use after free since vhost_vsock_dev_release() may free the

 Lead to use.

pointer at the same time.

Fix this by holding the lock during the acess.

ÂÂ Access.

Reported-by: syzbot+e3e074963495f92a89ed@xxxxxxxxxxxxxxxxxxxxxxxxx
Fixes: 16320f363ae1 ("vhost-vsock: add pkt cancel capability")
Fixes: 433fc58e6bf2 ("VSOCK: Introduce vhost_vsock.ko")
Cc: Stefan Hajnoczi <stefanha@xxxxxxxxxx>
Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
[...]

MBR, Sergei

Let me post V2.

Thanks